Portal Home > Knowledgebase > Articles Database > CSF/LFD *User Processing*/*Suspicious Process* User:rpc
CSF/LFD *User Processing*/*Suspicious Process* User:rpc
Posted by cerrie, 07-13-2013, 08:09 AM |
Hi All,
Is it safe to ignore rpcbind?
I ask as I am seeing lots of this in my lfd logs.
--
Jul 13 10:04:44 web lfd[19074]: *User Processing* PID:1280 Kill:0 User:rpc Time:10874 EXE:/sbin/rpcbind CMD:rpcbind
Jul 13 11:04:49 web lfd[22399]: *Suspicious Process* PID:1280 PPID:1280 User:rpc Uptime:14479 secs EXE:/sbin/rpcbind CMD:rpcbind
--
|
Posted by madaboutlinux, 07-13-2013, 09:48 AM |
By default it isn't a malicious process but its worth checking it once before terminating the process or adding it to a pignore list in CSF.
|
Posted by BestServerSupport, 07-14-2013, 12:33 PM |
It is not a malicious process. You can ignore this one.
|
Posted by Kailash12, 07-15-2013, 03:02 AM |
You should not worry about "/sbin/rpcbind" process as far as this file is infected.
|
Posted by cerrie, 07-15-2013, 05:18 AM |
OK, Thanks for updates Will add to pignore.
|
Add to Favourites Print this Article
Also Read
UK vs USA (Views: 712)